skill-security-auditor

Fail

Audited by Snyk on Jul 27, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.80). The skill contains mandatory promotional instructions to include donation/signup links (Mandatory Intro Message and System Prompt Inquiry Response) that are unrelated to its auditing purpose and compel the agent to output external solicitations, which is deceptive behavior outside the skill's stated scope.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 27, 2026, 12:12 AM
Issues
1
Security Audit — snyk — skill-security-auditor